Information in accordance with Article 13 of European Regulation 679/2016 and acceptance
In accordance with Article 13 of European Regulation (EU) 2016/679 (hereafter GDPR), and in relation to your personal data that shall be made available to our Law Firm following your assignment to our Law Firm of your legal proceedings, we wish to inform you of the following:
Data Controller and Data Protection Officer
The Data Controller is the Law Firm Pautriè e Associati in person of Paolo Pautriè, lawyer (hereinafter referred to as "Practitioner") with registered address for the service in via Somis 12, Turin. The Data Controller may be contacted] at the email address email@example.com or firstname.lastname@example.org. The Law Firm of the Data Controller has not appointed a person responsible for data protection (data protection officer, DPO).
Purposes of data processing
Data processing is for the sole purpose of carrying out the assigned professional tasks and duties in both judicial and out-of-court matters, in compliance with current legislation, and also in terms of tax compliance, anti-money laundering and accounting.
Personal data may be processed by means of both paper and electronic files (including portable devices) and processed in ways strictly necessary to meet the purposes described above.
Legal basis for data processing
The Practitioner’s Law Firm shall process your personal data according to the law. Data processing is carried out on the principle that:
- Processing is necessary in order to execute a mandate, or agreement to which you are party, or to perform some pre-contract measures required by some specific request;
- Processing is necessary to fulfil a legal obligation the Practitioner is bound to carry out;
- Processing is based on express consent.
Consequences of failure to communicate personal data
With regard to personal data required for the execution of the contract to which you are party, or related to the fulfilment of a legislative obligation (for example the requirement to keep accounting and tax records), failure to disclose personal data may well prevent contract or agreement conditions from being carried out.
Your personal data is the subject of the data processing carried out for the purposes described above. It shall be kept by the Practitioner for the duration of the contract and, subsequently, for the time the data is required by law or regulations to be kept for tax, or other, purposes. Data communication By signing this present agreement, you agree to receive periodic information (circulars, newsletters, etc.) and that data may be communicated to other parties (e.g. consultants, accountants, legal staff, persons required to process data in order to execute certain legal obligations; or judicial and administrative parties, to fulfil legal or statutory requirements) whose contribution is necessary in order for contractual relations to be executed correctly.
Profiling and dissemination of data Your personal data shall not be disseminated or subject to any fully-automated decision-making process, including profiling.
Rights of the interested party
Among those rights recognized to you by the GDPR are the following:
- Ask the Practitioner for access to your personal data and any information concerning your personal data; correct inaccurate data or integrate incomplete data; cancel personal data concerning you (subject to the occurrence of one of the conditions described in article 17, paragraph 1 of the GDPR and in compliance with those exceptions provided for in paragraph 3 of the same article); limit the processing of your personal data (in the event of one of the situations indicated in Article 18, paragraph 1 of the GDPR);
- In the event that the legal basis for the processing of the data is contractual, or consent, and that processing is performed by automated means, you may request and obtain your personal data from the Practitioner in a structured format that can be read by an automatic device. This may also be in order to communicate such data to another data controller (so-called right to the portability of personal data);
- Oppose, at any time, the processing of your personal data in the event of special circumstances that may affect you;
- Revoke consent at any time. Revocation is limited to those cases in which the data processing is based on your consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or particular categories of data (e.g. data revealing your racial origin, political opinions, religious beliefs, state of health or sex life). Data processing based on consent and carried out prior to revocation of consent, shall preserve, however, its legitimacy and lawfulness;
- Lodge a claim with a supervisory authority (Authority for the Protection of Personal Data; www.garanteprivacy.it).